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(54) An improved apparatus for 
signature verification 

(57) Real-time signature verification 
uses a transducer pad in which the 
pressure of a stylus causes contact to 
be made between two resistive films. 
Such a transducer is energised by 
current pulses to sample pairs of X 
and Y co-ordinates 1 1 4, every 5 
milliseconds. The analogue voltage 
outputs are converted to digital form 
and processed under the control of a 
microprocessor to determine, 115, 
numerical parameters each 
representing a significant feature of 
the signature. A set of specimen 
signatures is collected and from these 
the mean values and standard 
deviations of several relevant 
parameters are calculated and 



committed to memory 61 — 65, 69, 
70, each standard deviation being 
modified, 64, 65, by the standard 
deviation of the population at large. 

The parameters for a working 
signature are compared, 1 1 7, with the 
respective stored mean values for the 
individual concerned. Each deviation 
from a stored mean value is compared 
with the corresponding stored 
standard deviation in a non-linear 
scoring circuit. The aggregate score 
derived from the comparison of 
several parameters is compared with a 
preset threshold level to decide 
whether or not a working signature is 
genuine. 

The specification describes a 
number of refinements which result in 
improved performance compared with 
earlier embodiments. 
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SPECIFICATION 

An improved apparatus for signature verification 

The present invention relates to the analysis and verification of predetermined written or drawn 
patterns and particularly to the verification of signatures as a means of protection against forgeries. 
5 The apparatus disclosed may serve the dual purpose of being used both as a means for entering 5 . 

handwritten data into a data processing system and also as a means of authorising by signature, the 
input of such data to the system. 

It is customary to verify the authenticity of a written signature by comparing the pattern thereof 
with a previously registered pattern of the same signature, which may be held in the files of, for 
1 0 example, a bank or frequently nowadays already written on a credit card. 1 0 

Hitherto, this task has been carried out manually but there is a need for a rapid and economic 
system for automatic signature verification. One of the difficulties inherent in such a system is to find a 
way of carrying out this task which is feasible on a large scale and applicable to digital data process 
techniques. Moreover if a credit card is stolen, it is not difficult for a thief skilled in such matters to learn 
1 5 how to copy the signature on the card accurately enough to satisfy a shop assistant or bank teller. 15 
Clearly there is a need for a more secure method of verifying a signature. Such a method could include 
monitoring the actual speed and rhythm employed by the authentic signatory and comparing these 
with stored coded records of the correct shape, speed and rhythm. A thief would not normally know, 
and would be very unlikely to be able to reproduce, the speed and rhythm used by the owner of the , 
20 signature. Moreover, in the event that the legitimate owner of the card was using it at, for example, a 20 
street cash dispenser, and was accosted by a robber he may not under coercion sign his name with the 
same rhythm as he would use customarily under more relaxed conditions. 

Quite apart from the above considerations, it is also common knowledge that the same person 
may sign his name on different occasions with patterns which are distinctly different in detail, and yet 
25 to the trained eye and in particular to the writer himself, such different signatures can be recognised as 25 
having been produced by the same hand. It is believed that the rhythm with which a signature is 
written is more important than the precise pattern produced, because it results from a learned 
sequence of nerve impulses delivered to the muscles of the hand at a rate too fast to have been 
controlled consciously with visual feedback. 
30 A technique and apparatus for applying these principles to the validation of signatures was 30 

disclosed by one of the present inventors and others, in U.K. Patent 1 480066, first filed in July 1 973. 
In that specification, a hardward embodiment was described which enabled certain distinctive features 
in the rhythm and pattern of a signature to be identified, coded and compared. Further study of the 
problems involved and the use of more recently available technology, especially including 
35 microprocessor and software techniques, have led to various improvements in the method, which will 35 
be disclosed in the specification. 

An electronic writing pad which gives coordinate readout of the position of a conventional writing 
instrument such as a pencil or pen in digital form was described in U.K. Patent 131 0683. 

The invention provides apparatus for verifying the signature of an individual wishing to gain 
40 access to a facility comprising: 40 

i) a transducer responsive to the pressure of a ballpoint pen or similar instrument, when the 
individual writes on a sheet of paper that overlies the transducer, which transducer generates digital 
electronic signals in real time representing the position of the tip of the pen in terms of X and Y 
coordinates relative to a predetermined origin of coordinates; 
45 ii) means arranged to sample at a rapid rate the X and Y coordinates and therefrom to determine 45 

the changes from one sample of each coordinate to the next; 

iii) digital electronic processor means arranged to compute from these changes the X and Y 
components of velocity and of acceleration and their resultant vectors; and further to identify 
significant features of the signature which may be represented by mathematical parameters. 
50 iv) memory means in which is stored (a) algorithms for identifying significant features of the 50 

signature, including upper and tower turning points of loops, points at which the pen is applied to or 
lifted from the paper, and lengths of segments of the signature measured as X or Y components or as 
resultant vectors of the path followed by the pen and (b) mean values and standard deviations or other 
indications of their spread, for numerical parameters representing a selection of these features 
55 obtained by analysis of several specimen signatures from each of a large number of individuals entitled 55 
on verification of their signatures, to have access to the facility; and 

v) decision means arranged-to compare the parameters obtained from the working signature with 
the mean values and indications of spread for the corresponding parameters of the sample signatures 
the same individual recalled from memory, wherein the limitations in the calculation of a realistic 
60 spread, or Standard Deviation, from a small sample of specimen signatures from one individual are 60 
overcome by the process of combining in the form of a weighted mean, the spread or Standard 
Deviation of a given parameter for the particular individual with the spread or Standard Deviation for 
the corresponding parameter as determined for a substantial sample of individuals. 

Preferably, the apparatus is arranged to derive parameters from several successive signatures of 
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an individual and to store averaged values and deviations therefrom for use in subsequent recognition 
of the signature of that individual. 

The apparatus may also have the following additional features which are delivered to be novel: 

(a) the device is arranged to consider whether parameters from a specimen signature of an 

5 individual are consistent with previous specimens from that individual, to reject specimens which do 5 
not fall within specified consistency limits and to abort the collection of a series of specimen signatures 
from an individual after a predetermined number of such specimen signatures have been rejected; 

(b) the original parameters appertaining to an individual may be updated by parameters derived 
from recent verified signatures of that individual; 

1 o (c) the spread or Standard deviation for a parameter derived from a set of specimen signatures 1 0 

provided by a single individual on a single occasion may be adjusted or "whitened" in accordance with 
the known standard deviation of that parameter under working conditions for the population as a whole; 

(d) the difference between a stored parameter for a signature and a corresponding measured 
parameter for a signature to be verified is modified by a predetermined function to give an error score 

1 5 which, in a range of low differences is scored at a zero rate, in a range of intermediate differences is 1 5 
scored at a linear rate and for differences beyond the intermediate range is secored at a fixed high 
values. 

(e) the scoring circuit has inputs by which the acceptable limits of total score may be adjusted in 
accordance with the measured variability of the signature of the individual the value of the current 

20 transaction, the prevailing risk of attempted fraud and the deference which the system is required to - 20 
present to a customer. 

An important aspect of feature (b) is that the device can collect specimen signatures "on line" 
from real transactions and gradually built up a database of signature characteristics relating to the 
individuals using the system. 
25 Some embodiments of the present invention and its relationship to the prior art disclosed in the 25 

two G.B. patents to which reference has been made above, will now be described with reference to the 
accompanying drawings, in which: 

Figure 1 is an illustration of a typical signature with several types of distinctive features identified. 

Figure 2 is a block schematic diagram of a hardware configuration disclosed in G.B. Patent 
30 1 480066 for the derivation of a set of six of the parameters in Table 1 from the analysis of some of the 30 
features illustrated in Figure 1 . 

Figure 3 shows two versions (3a and 3b) of a circuit disclosed in G.B. patent 1 3 1 0683 whereby 
alternate analogue voltage signals may be derived on two signal lines to represent the x and y 
coordinates of the position of a pen on a transducer pad. 
35 Figure 4 shows in simplified form the construction of a transducer pad forming part of the circuits 35 

in Figure 3 and first disclosed in G.B. Patent 1 31 0683. 

Figure 5 shows how a currently available microprocessor chip may be used in conjunction with 
the transducer pad of G.B. Patent 1 3 1 0683 to produce results equivalent to but surpassing in 
efficiency those provided by the circuit of Figure 2. 
40 Figure 6 is a flow chart summarising the operational steps followed when deriving reference 40 

parameters from a set of specimen siguatures and for using these reference parameters in the 
verification of a working signature. This is based on a similar flow chart presented in G.B. Patent 
1480066, but includes some additional innovative steps made possible by the use of the 
microprocessor. 

45 Figure 7 shows in block schematic form, a system configuration in which a signature verification 45 

module in accordance with the present invention may be combined with a character recognition 
module using the same transducer pad and the combined terminal may be linked to a host computer 
system. 

Figure 8 shows a non-linear weighting curve which has been adopteci in the system to allow 
50 parameters of low discriminatory value to be ignored and those of high significance to be given 50 
preponderant weighting in comparison with the normal range of weightings given to typical 
parameters. 

Figure 9 is a block schematic diagram of a hardware module capable of implementing the non- 
linear weighting curve shown in Figure 8. 

55 Figure 1 0 illustrates graphically a weighting and normallising method used in the derivation of 55 

some of the more complex parameters used by the system. 

Figure 1 illustrates a typical signature, in which a number of distinctive features are identified. 
The first of these is the point ( 1 ) at which the pen or other writing instrument is first applied to the 
surface on which the signature is to be written. This point will usually be taken as the reference point 

60 both in terms of spatial and time measurements for other distinctive points in the signature, but go 
alternatively any other distinctive point such as the left extremity (2) or the highest point (4) could be 
chosen as the reference point if this would give more reliable performance. The starting point (1 ) is not 
necessarily near the left side of the signature, one can readily visualise signatures in which this point 
may be near the middle of the signature or towards the right. Its position relative to the "centre of 
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gravity" of the signature may in fact be an important parameter contributing to the distinctiveness of a 
signature. 

The extreme right hand extremity of the signature (3) and the lowest point (5) are two other easily 
recognised features of a signature, as are the other "turning points" (9, 1 0, 1 1 , 1 2) to the right, left top 
5 and bottom of loops. There are several of these and in combination they can provide powerful 5 
verification parameters. 

Other easily detected points which have a strong verification potential are the several points (7) 
at which the pen is lifted from the paper between separate segments of the total signature, and 
especially the last one (6) which can be recognised as representing the completion of the signature, 

1 0 both in spatial terms and in time. 1 0 

Complementing the points of lift-off (7) are the points at which the pen is re-applied to the paper 
to begin the second and subsequent segments of the signature. Typically a signature is made up of 
several segments, which may be recognised as the traces extending between a point at which the pen 
is applied to the paper and the subsequent point at which it is lifted off. Often the first names or initials 

15 in a signature are separate segments from the surname, and there may be gaps between consecutive 1 5 
letters of one word, as between the "S" and the "m" of "Smith" in Figure 1 . The pen is usually lifted 
from the paper to place dots over the letters "i" or "j", to cross the "t"s or to apply accents. All of these 
segments, including dots, can have considerable significance, as also can the "hidden distances" 
between a point of lift-off (or "pen-up") and the next "pen-down". 

20 The features described above are easily recognised by visual inspection of a completed signature, 20 

but there are others which can only be detected when the actual writing of the signature is monitored 
in real time. 

Such features include velocities and accelerations of the pen, which may be measured in the 
horizontal (X) direction, the vertical (Y) direction, or in the resultant direction of pen movement. It is 
25 also possible, when monitoring the writing of a signature in real time, to take note of the times at which 25 
distinctive features such as pen-ups, pen downs, and turning points are reached and to derive 
appropriate weighted and normalised parameters based on these measurements. 

Other useful parameters can be derived from observing the sequences of turning points and their 
relative timings and spatial positions. Most of these features have been used before in signature 
30 verification apparatus, notably that described by Parks, Pobgee and Yardiey in U.K. Patent 1 480066. 30 

At a later stage in this specification some of these more complex parameters will be explained 
further, but it is appropriate at this point to describe in broad terms the apparatus based on the above 
patent, which has been further developed and improved by means of the techniques to be described 
subsequently, and which are believed to be novel when applied in this context. 
35 Figure 2 shows in block schematic form, an apparatus first disclosed in G.B. Patent 1480066 in 35 

which some of the parameters described above can be derived using digital techniques, from the 
output signals provided by a transducer pad (21 ) and Analogue/Digital converters (50) whose internal 
structure and circuitry are shown in more detail in Figures 3, 4 and 5. 

The transducer pad, the operating principles of which have been fully described in G.B. Patent 
40 131 0683, consists basically of an insulating base plate on which is deposited a rectangular uniformly 40 
resistive layer (51 ). Conductive strips (52) are applied along two opposing edges of the resistive layer 
and these strips are connected to a source either of alternating or pulsed direct current, so that a 
potential gradient is established across the layer from one conductive strip to the other. 

A second resistive layer (54) of similar characteristics to the first is deposited on a flexible 
45 membrane which is stretched over the base plate in such a manner that the two resistive layers face 45 
each other but are held apart by spacers near the edges of the flexible layer, and may also be further 
isolated from each other by small islands of insulating material deposited over the resistive layer as 
described in G.B. Patent 1 310683. The two layers are therefore normally isolated from each-other 
unless pressure is applied at a discrete point (55) on the surface of the flexible layer as for example by 
50 the application of the tip of an instrument such as a pencil or a ball point pen. When such a writing 50 
instrument is applied, the second resistive layer (54), if not connected to any other source of electrical 
potential, will take up the potential of the point where it makes contact with the first layer. A voltage 
sensing circuit (56) connected to the conductive strips (57) of the second layer will therefore provide 
an analogue indication of one coordinate of the position of the pen tip. The conductive strips (57) 
55 connected to the second layer (54) are located at the edges of the layer perpendicular to the edges of 55 
the first layer (51 ) along which its conductive strips are connected. If therefore the electrical 
connections to the two layers are interchanged, with the second layer carrying current while the first 
layer is connected to a second voltage sensing circuit (58), the voltage sensed in the second circuit 
(58) will given an analogue indication of the second cartesian coordinate of the position of the pen tip. 

60 Instead of switching the source of current between the two resistive layers (51 & 54) by means of 60 

switches (60) as depicted in Figure 3a f the same effect can be achieved by connecting diodes (59) in 
series with the two resistive layers as shown in Figure 3b and energising them with the alternate half- 
cycles of an alternating current. A third method of energising the transducer pad is preferred for the 
present embodiment, wherein two alternating sequences of digital pulses are applied, one to layer (51 ) 
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and the other to layer (54). Figure 5 shows such an arrangement in which the two interlaced trains of 
pulses are derived from clock-pulse outputs of a proprietory microprocessor chip. 

Whichever method is used to energise the transducer pad, the effect is to produce at the outputs 
from the voltage sensing circuits (56, 58) a series of analogue voltages representing alternately, 
5 successive X and Y coordinates. 5 
If the drive currents applied to the transducer pad are derived from alternate half-cycles of the 
mains supply, the sampling rate for each of the two sets of output signals will be 50 (or 60) per second, 
giving a measurement of pen position every 20 milliseconds. For real-time monitoring of the writing of 
a signature, this rate is rather low to give adequate resolution of detail, Electronically generated pulses 
1 0 allow a faster rate of sampling to be used. Two hundred samples per second has been found 1 0 

convenient, drive pulses being applied to the transducer pad every 2.5 milliseconds to the X and Y 
inputs alternately. 

The analogue voltage outputs from the sensing circuits (56, 58) may each be fed to separate 
Analogue/Digital convertors (50) as shown in Figure 3b, or they could be switched in synchronism with 
1 5 switches (60) by a further switch (60a) to share a common analogue/digital converter (50) as shown in 1 5 
Figure 3a. 

When operated in a higher speed digitally pulsed mode, it is most convenient to use a 
microprocessor chip such as the Intel type 8022, which is provided with a pair of analogue/digital 
converters on the chip. This arrangement is also indicated in Figure 5. Additional details shown in 

20 Figure 5 include a crystal oscillator (85) chosen to define the clock frequencies used by the 20 
microprocessor, for its internal operations, and also the clock rates output from the microprocessor to 
drive the transducer pad (21). 

The power output from the microprocessor will not be adequate to produce the necessary current 
drive to the transducer pad, therefore a pair of NAND gates (87, 88) are connected as an R-S flipflop 

25 circuit to provide the necessary current drive to the pad and also to ensure that only one resistive layer 25 
of the pad can be energised at a time. Memory module (86) contains the operating instructions for the 
microprocessor, the mathematical algorithms used in the analysis of the signals derived from the 
transducer pad and the data collected from the pad, on which the algorithms operate to reach the 
required decisions as to the validity of a signature written on the pad (21 ). 

30 Reverting to Figure 2, the general principles of operation of the system will be described in terms 30 

of a digital hardware embodiment, which was first presented in G.B. Patont 1480066. 

The digital data derived from the transducer pad (21 ) by Analogue/Digital converters (50) are 
applied on X and Y input lines (16, 1 7) to three input modules (23, 25, 26). 

When no contact is being made on the transducer pad (2 1 ) by the pen, the sensor circuits (56, 

35 58) have no voltage injected into them and therefore they respond as if the coordinates of the pen 35 
point were both zero. This condition is sensed by the Contact Detector (23). If either or both of the 
coordinate inputs (16, 17) represent zero, the output of contact detector (23) sets bistable (24) 
accordingly. When the pen is in contact with the paper, therefore the output from bistable (24) enables 
clock pulses to be accumulated by counter (35) for as long as bistable (24) remains set. 

40 Registers (25 and 26) store the latest digital inputs on lines (1 6, 1 7), which represent the current 40 

position of the pen, until the next set of inputs is received. When a new set of coordinate inputs is 
received, the old set is transferred from registers (25) and (26) to registers (27) and (28) respectively. A 
pair of digital subtracters (29. 30) derive the differences between the current and the preceding values 
of both the X and the Y coordinates, and thus produce digital numbers proportional to the velocity of 

45 the pen as resolved into X and Y components. A comparator circuit (3 1 ) compares the magnitude of 45 
each such difference in the X components with subsequent ones and retains the higher value. 

This comparison continues throughout the sampling of the complete signature and the final 
number held in comparator (31 ) therefore represents the maximum X increment, and therefore the 
maximum velocity since all increments of distance are measured over the same basic time interval. 
50 Provision may also be made to record the time, as expressed as a count of time intervals from the first 50 * 
instant of the pen making contact with the paper on the pad, when the maximum velocity was 
detected. Although not shown in Figure 2, obviously a similar parameter may be defined in respect of 
the maximum velocity in the Y direction, and its timing, and moreover separate measurements may be 
made for both positive and negative values of these velocities. 
55 The first time contact of the pen on the pad is sensed, contact detector (23) outputs a signal to a 55 

clock generator (32) and the output from this clock continues until stopped by a final timeout after the 
end of the signature has been identified. Counts from this clock gated with other signals for example at 
gates (47) and (22) enable the timing of particular events to be recorded in counters such as those 
shown (33 — 38). Counter (33) in particular records the running count of clock pulses until the clock is 
60 stopped, and could be sampled at any time by other circuits to read the times at which significant 60 
events occur. 

Clock pulses from clock module (32) are gated with the output of contact detector (23) in gate 
(47) to produce a measure of Time in Contact (TIC) for the pen on the pad. The output from gate (47) is 
passed to counter (34) which keeps a running record of "TIC". 
65 Since the output of Contact detector (23) monitors contact, the output of invertor 20 monitors 65 
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lack of contact, and its output is gated with the output of clock (32) in the same way by gate (22) to 
produce a Time Out of Contact signal (TOO). This signal may be passed to a counter equivalent to the 
'TIC" counter (34) to record a cumulative count of all "TOC" signals. Normally the gaps between 
segments of a signature will be short, less than say 0.5 second, and when an out of contact signal 
5 exceeding this duration is sensed, it may be recognised as the end of the signature. This recognition 5 
may be provided for by connecting the output of gate (22) to a counter (48) set such that if it reaches a 
predetermined count before being reset by a signal output from bistable (24) indicating that contact 
has been restored, it will output to gate (49) & delay circuit (46) a signal indicating the completion of 
the signature. 

1 0 The six counters (33 — 38) have thus been supplied with numerical data representing the 1 0 

following parameters for the signature under examination: 

in counter 33 : Total elapsed time from start, 

in counter 34: Time in Contact, 

in counter 35: Number of segments in signature. 

15 in counter 36: Sum of increments in X (length) 15 

in counter 37: Maximum increment (velocity) in X 

in counter 38: Sum of increments In Y (height) 

In practice, more than this number of parameters will be monitored, and therefore a larger 
number of counters will be employed, but the principles will remain the same. 

20 The counts held in the counter modules (33 — 38) for a signature to be verified (hereinafter 20 

referred to as a working signature) are compared with reference parameters stored in a data base (39) 
and a learning process is needed in which these parameters are defined and loaded into the data base. 

The reference parameters used in the system consist of mean values of the counts expected in 
each of the counters (33 — 38) and a measure of the spreads in these counts encountered when 

25 analysing a set of specimen signatures. The spreads may conveniently, but not exclusively, be stored in 25 
the form of Standard Deviations calculated over the set of specimen signatures. The mean values and 
spreads are typically derived from a set of six specimen signatures provided by the individual whose 
working signatures are to be verified. Certain enhancements may be introduced to the basic Standard 
Deviations as measured. These will be explained later. The steps involved In analysing these specimen 

30 signatures and deriving the means and standard deviations are outlined in the flow chart of Figure 6. 30 

To minimise the problems which could arise if two different individuals had signatures which 
were sufficiently similar to lie within the tolerances set for the recognition of either one of them, or of a 
random scribble on the pad imitating one of a large number of signatures in the data-base of a system, 
a useful security measure is to allocate each individual a code number which is entered Into the system 
35 manually or by a card reader, capable of reading a code carried on an authority card (credit or the like) 35 
by the individual. 

This code number accesses the address in the data base at which the para meters for the 
signature of the individual are stored or will be stored. During ensuing verification operations, the 
claimed identity of the individual as represented by this code number is used to select from the data 
40 base only those parameters appropriate to that unique individual for comparison with those derived 40 
from his working signature. 

In either the teaching or the verification sequences, the first step (113) shown in Figure 6 is the 
input of this User code number, which causes the relevant parameters to be called up from the data 
base and power to be applied to the transducer pad (21). By means of a visual display screen 

45 associated with the system, the individual is asked to write a specimen signature on a sheet of paper 45 
fitted to the transducer pad (21 ). As he writes, the coordinates of successive points in his signature are 
sampled at intervals typically of 5 milliseconds by the system depicted in Rg. 2 and the significant 
parameters accumulated in counters (33 — 38) are signalled over line (53) for storage in a working area 
of memory within data base (39). After the first set of parameters have been collected and analysed, 

50 the system asks the individual providing the specimen signatures to sign again. The process is repeated 50 
a second and subsequent times until a sufficient number have been provided to enable mean values 
and spreads to be computed for each of the significant parameters. The additional data obtained from 
the repeated signatures are stored alongside those for the first signature, and are then used to compute 
the means and standard deviations. 

55 Since a small sample of about six specimen signatures may not always give realistic spread of 55 

values when they are all taken under identical conditions, it has been found useful to apply randomising 
factors to the standard deviations. This is done by adding to the standard deviation for each parameter 
computed for a given individual, a predetermined proportion of the standard deviation for that same 
parameter as found to apply generally for a range of conditions-for a significant sample of the 

60 population at large. Various prearranged weightings may be used. One preferred manner of combining 60 
the standard deviations of the individual and that of the population at large is simply to take the mean 
of the two deviations. 



6 



GB 2 104 698 A 6 



SD correctad = 



SD,+SD P 



If the resulting parameters derived as above are found to conform to what experience shows to 
be realistic limits, the resulting mean values and standard deviations for each parameter are stored in 
the main data base. If they are not considered realistic, the system may call for further specimen 
5 signatures to be included in the analysis and may discard any specimens which are widely inconsistent 5. 
with the majority. If the additional signatures called for do not produce realistic results after the 
provision of a designated number of additional specimens, the whole attempt to obtain a consistent set 
may be aborted and a new set collected on a subsequent occasion. When the system is used in the 
Verification mode to check the parameters of a working signature, input of the signer's code number 
10 causes his particular set of mean parameters to be loaded in the form of numerical counts over line 10 
(18) of Figure 2 from the Data base to the counters (33 — 38) and thereafter, the numbers generated as 
described above, by modules (24, 29, 30,31, 32 and 47) are counted down from the reference values 
set into the respective counters. 

If the working parameters matched exactly those held in the data base, at the end of the 
1 5 signature, all the counters would have counted down exactly to zero, but of course no two signatures 1 5 
even by the same hand are exactly alike and therefore it is likely that small residual numbers will remain 
in each counter, the wider these residual counts deviate from zero, the wider the deviation of the 
respective parameters from the mean values stored in the data base. 

Some parameters are more significant than others and some will have larger standard deviations 
20 than others. 20 

Factors which may be standard deviations or a simple binary fraction of these are input from the 
data base to multiplier modules (40 — 45) where the residual counts in counters (33 — 38) are divided 
by the designated factors to produce a set of weighted scores. These weighted scores are fed into 
addition module (101) whose output, representing the aggregate score for the signature being verified, 
25 is passed to AND gate (105). This signal remains isolated by gate (105) until the output of counter 48 25 
has reached a level representing a time interval longer than could reasonably be expected to occur 
between signature segments. 

Its output to AND-gate (49) and through a further short delay (46) to AND-gate ( 1 05) defines the 
end of the signature. Before delay (46) has had time to take effect, the signal on AND-gate (49) causes 
30 the contents of counter (31 ) to be transferred to counter (37) whereupon the change in its count 30 
updates the total count output from adder (101) to AND-gate (105). At the expiry of the delay (46) the 
AND-gates (1 05) & (107) are enabled, so permitting the output of adder (101 ) to be passed to 
comparator (1 02) where it is compared with a preset threshold level (1 08). If this threshold Is not 
exceeded by the aggregate count output from adder (101 ), an acceptance signal is output at terminal 
35 (109). If the count output from adder (1 01) exceeds the threshold level (108) the inverter (106) holds 35 
the input of AND-gate (1 07) high, with the result that a reject signal is output at terminal (110). 

As described above, the inputs to the addition module (101) consist of the counts accumulated in 
the feature counters (33 — 38) each weighted by a factor normallising them to the standard deviation 
derived from the specimen signatures of the individual and stored in the data base. 
40 An alternative option first suggested in G.B. Patent 1 480066 was to square the weighted 40 

differences extracted from these counters before adding them in addition module (101). 

A further improvement has been developed, which enables the advantages of non-linear scoring 
to be achieved without the complexity of introducing squaring circuits. The nature of this improvement 

is Illustrated in Figure 8. 

45 Let the mean value of a given parameter "j" for an individual 'T be x„ and let the corresponding 45 

value of this parameter as derived from a working signature to be verified be x,j. 

The scaler difference between the two values is: 

xT- - x, . 

This may be expressed as a multiple of the Standard deviation by dividing: 
50 * X ^~ 50 

This multiple in turn may be given a binary weighting of N=1 , 2, 4 or 8 and then expressed as a 
scaling factor £„. 

Figure 9 shows data x„ and x„ applied to the inputs of a digital subtractor (91) whose output 
£T_ X ) W ith its sign ignored is applied to a multiplier (93) where it is multipled by N/cr u before 
55 application to two comparators (96, 97). The outputs of these comparators are arranged such that if 55 
the threshold T 2 is exceeded, a very high score (for example 99) is set by means of switch (99) on the 
line supplying input "j" to the addition module (1 01 ). If neither threshold T, nor T 2 is exceeded, a score 
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of zero is applied by switch (1 00) to the input line T of the addition module (101 ), but if threshold T, 
is exceeded and not threshold T 2 , switch (98) passes a score S,^,,— T, to module (1 01 ). 

By this means it is possible to arrange that parameters falling below threshold T, do not 
contribute to any rejection decision, those falling between T, and T 2 are weighted linearly with £, while 
5 those falling above the threshold T 2 cause the signature to be summarily rejected. Once the total score 5 
S tot appertaining to all the separate parameters derived from a signature has been accumulated by 
addition module (1 01 ) it is passed to comparator (1 02) where an output signal binary ONE is 
generated if S tot is less than threshold TH, or a binary ZERO is generated if S tot exceeds this threshold 
TH. 

1 0 Threshold TH itself may be set to different levels at the discretion of the system operator. 1 0 

The value of this threshold (TH) will have a fixed upper limit, or default level R, above which any 
input signal from the addition module (101 ) would result in summary rejection of the proffered 
signature. However, this upper limit would normally be reduced to a more stringent level depending on 
the circumstances under which the system was being operated. Considerations which might dictate 
1 5 the imposition of a lower threshold include: 1 5 

The variability of the signature of the individual concerned compared to that of the population at 

targe. 

The cash value of the transaction being authorised, for example in the case of a credit card 
transaction, the cost of the merchandise being bought 
20 The reliability of the holder of a credit card as indicated for example by his credit limit or the 20 

esteem in which the customer of a bank or retail business might be held. 

The previous experience of fraudulent activities in the locality where the terminal is operated. 
The variability of a signature is capable of quantitative evaluation, as wili now be demonstrated. 
There are a number of ways in which the Variability of a set of specimen signatures can be 
25 defined mathematically. The simplest of these, based on the standard deviations of n parameters for 25 
individual "T in a population of "p" individuals is given by: 



VARIABILITY 



I 



SD ij 

SD P5 



where ')' refers to one of the n parameters whose overall effect is under consideration. 

Alternatively, it can be convenient to work with Variances instead of Standard Deviations, where 
30 Variance=(Standard Deviation) 2 30 

Then, 

VARIABILITY = £ Varianc^ 



Variance^ 



A third definition has been found useful, in which the modified value of Standard Deviation is 
used after "whitening", by the addition to the standard deviation of the parameters of the present 
35 signature, of a correction based on the standard deviation for the population at large for the 35 
corresponding parameter. Then: 

VARIABILITY * « V *-SD.. + (T-k).SD 



y jc.sd a1 + n-k). S p p1 

£— sn . 



SD . 

PJ 



"Whitened "SD^ 



SD . 

n 

and if k is taken as 0.5, as is often the case, this latter definition simplifies to: 



y SD ±j + SD pj 



Ar . VARIABILITY - , 

40 / 40 

2 SD 

P3 



Another important feature illustrated in the flow chart of Figure 6 is the facility to update the 
parameters stored in the data base using new information derived from the actual working signatures 
presented for verification. 

It will be seen from Rgure 6 that after the parameters derived from the working signature have 
45 been compared (117) with those called up from the data base (39), the first check carried out is to 45 
ensure that the score derived from the comparison is within limits. If it is, a further check may be 
applied with tighter limits (1 1 1 ). If this test shows the new data to be within the standard deviations of 
the reference parameters, it may well be that the new parameters wilt provide a better model of the 
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true working signatures for the individual than has been provided by the original set of specimen 
signatures. 

There are various reasons why this should be the case. The specimen signatures may have been 
taken under conditions different from those of the working signatures. For example, they may have 
5 been taken in a bank manager's office rather than at the normal cashier's position. They may have been 
taken when the writer was more relaxed than he would be on a normal active day. The form of his 
signature and the steadiness of his hand will probably vary with his health and advancing age. 

A convenient method of providing for the updating of stored parameters is to recalculate the 
mean values of each parameter and Its standard deviation by calculating a weighted mean between the 
1 0 new parameters and the old, with the weighting in favour of the old stored parameters being 
dependent on the number of previous samples on which they were based. 

Once the total number of signatures taken exceeds ten, it is no longer necessary to keep count of 
how many have been taken. It is more convenient simply to apply a weight of 90% to the stored 
parameters and 1 0% to the new ones in order to modify the stored parameters by a small amount each 
1 5 time a signature is verified and accepted for use in a data-base update. By this means, a single 

inconsistent result would not be allowed to update the stored parameters and even one which differed 
only slightly from the stored data would only be allowed to influence that stored data to a limited 
extent. If, however, a minor change became a regular feature of a signature, the cumulative effect of 
this change over a series of about ten or twenty signatures would be to adapt the stored record 
20 progressively and give progressively greater weight to the new feature at the expense of any feature 
which it superseded. 

In view of this ability to collect data from working signatures, the special procedures often 
involved in collecting specimen signatures can be avoided. If, during the early stages of introducing a 
system in for example an "American Express" context, the users sign in the usual way for the credit 

25 facility being employed, but as they do so, the parameters of their signatures are recorded and passed 
to a central processor, to be stored until a sufficient number of other signatures from each individual 
have been analysed, a valid set of mean parameters and standard deviations could be built up to enable 
verification to be applied to subsequent working signatures. 

To date only a few parameters have been mentioned, which might be used as the significant ones 

30 on which to base a signature verification technique. It is believed that an optimum number of 

parameters to employ in a given system is between ten and twenty, although a much higher number 
than this can be considered, and it might even be advantageous for a system to be operated at 
different times with different sets of parameters in order confuse ingenious delinquents who might be 
tempted to try and "beat the system". 

35 Table 1 lists a considerable number of parameters which can be derived without two much 

difficulty from the "first order primitives" monitored by the circuit depicted in Figure 2. In the right hand 
column of the table, the manner in which the parameter may be derived from less complex parameters 
is indicated. The numbers in brackets refer to the less complex parameters involved. 

The list given in Table 1 is not exhaustive, a little study would suggest other parameters which 

40 might be used, but this list includes most of the parameters most likely to be employed in a practical 
system. 

The evaluation of the weighted and normallised parameters (88) and (89) In Table 1) may be 
better understood by reference to Figure 1 0 which illustrates in graphical form how these parameters 
are to be interpreted. 
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Table 1 

Features found useful in the analysis of a signature 



45 



50 



A First order primitives 

1 Pen out of contact with paper 

2 Pen in contact with paper 

3 Current position of pen 

4 Previous position of pen 



How derived: 
x and/or y=0 
x^O and y^O 
x n and y n 
X in-D and y (n-1) 



50 



B Simple derived parameters 



55 



60 



5 
6 
7 
8 
9 
10 
1 1 
12 
13 



1*4 



First "Pen Down" 
Subsequent "Pen Downs" 
Last "Pen up" 
Previous "Pen ups" 
Completion of signature 
Length of signature 
Duration of sigurature 
Number of segments 
x and y coordinates of each 
"pen down" and "pen up" 



change from condition (1) to (2) 
change from condition (1) to (2) 
change from condition (2) to ( 1 ) 
change from condition (2) to (1 ) 
As (7) confirmed by timeout, 
"x" difference between (5) &(7) 
count of pulses between (5) & (7) 
number of "pen downs" 



55 



60 
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Table 1 



15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 

26 

27 

28 

29 

30 

31 

32 

33 

34 

35 

36 

37 

38 

39 

40 

41 

42 

43 

44 

45 

46 

47 

48 

49 

50 

51 



40 52 
53 
54 
55 
56 

45 57 
58 
59 
60 
61 

50 62 



10 



15 



20 



25 



30 



35 



63 
64 

65 



55 



"Hidden distances" in x 
Total hidden distance in x 
Left extremity of signature 
Right extremity of signature 
Overall length of signature 
Highest point of signature 
Lowest point of signature 
Overall height of signature 
x-increment (=x velocity) 
y-increment (=y velocity) 
Resultant increment (velocity) 
Positive turning points in y 
Negative turning points in y 
Positive turning points in x 
Negative turning points in x 
Maximum rightward component of vel. 
Maximum leftward component of vel. 
Maximum upward component of vel. 
Maximum downward component of vel. 
Average rightward component of vel. 
Average leftward component of vel. 
Average upward component of vel. 
Average downward component of vel. 
Number of positive T.P. In y 
Number of negative T.P. in y 
Number of positive T.P. in x 
Number of negative T.P. In x 
Total number of turning points 
Hidden distances in y 
Resultant hidden distances 
Average hidden distances 
Length of segments 
Average segment length 
Hesitations 

Mean duration of hesitations 
Number of hesitations 
Maximum and total durations 

of hesitations 
Total y travel 

Maximum resultant velocity 
Total path length followed by pen 
Aspect Ratio 
Slant Factor 

Path length in each segment 
Segment lengthAotal length 
Segment path length/Total p.l. 
x-component of total path length 
y-component of total path length 
x coordinate of centre of gravity 
y coordinate of centre of gravity 
Integrated Horizontal distance 
for groups of features 
Integrated vertical distance 
for groups of features 



(cont.) 

differences ( 1 4) — ( 1 3) in pairs 
aggregate of all as (15) 
lowest value of x other than 0 
highest value of x 
difference (18)— (17) 
highest value of y 
lowest value of y other than 0 
difference (21)— (20) 

y n — Y n -i changes from — ve to + 
y n — y n _i changes from + to — ve 
x„— x n _, changes from — ve to + 
Xn— x n _, changes from + to — ve. 
Max value of (23) 
most — ve. value of (23) 
Max +ve. value of (24) 
most — ve. value of (24) 
mean of +ve values of (23) 
mean of — ve values of (23) 
mean of -hve values of (24) 
mean of — ve values of (24) 
count of events (26) 
count of events (27) 
count of events (28) 
count of events (29) 
Sum of (38), (39), (40) & (41 > 
Similar to (15) 
Resultants of { 1 5) & (43) 
Mean of all as (1 5) or (44) 
differences (13)— (14) 
Mean of all as (46) 
points where (23) & (24)=0 



"y" difference from (5) to (7) 
Maximum value of (25) 
Sum of all items (25) 
Item (22) divided by (19) 
Slope of line from (17)— (18) 
As (54) for each segment 
(46) divided by (10) 
(57) divided by (54) 
Scaler sum of all (23) 
Scaler sum of all (24) 
x coord for 50% of (54) 
y coord for 50% of (54) 

£ K ■ (x n -x;> 



similarly for y 
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30 



35 



40 



45 



50 



55 



C Time-dependent parameters 

70 Total time of "pen downs" (TiC) 

71 Total time of "pen ups" (TOO 

72 Fraction of time in contact 

60 73 Fraction of time out of contact 

74 Time to each "pen up" & "Pen down" 

75 Time to each turning point 

76 Time taken to write each segment 

77 Normallised time for each segment 



count of clock pulses I.e. 
count of clock pulses o.c. 

(70) divided by (11) 

(71) divided by (11) 

clock counts from (5) to (6/8) 
clock counts from (5) to (26 — 29) 
clock counts from (6) to (8) 
(76) divided by (11) 



60 
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Table 1 (cont.) 





78 


Av/eraae time ner seament 


(11) divided by (12) 




79 


Individual times out of contact 


clock counts from (8) to (6) 




80 


Average times out of contact 


(71) divided by (12)— 1 


5 


81 


Tim a taken to reach centre of aravitv 


clock count to (62) 




82 


Time taken to reach mid length 


clock count to (5)+(7) 




83 


x distance covered in half time 


2 

sum of (23) to 50% of (11) 




84 


Path distance covered In half time 


sum of (25) to 50% of (11) 


10 


85 


Sequences of turning points 


(10) divided by (11) 




86 


Average horizontal velocity 




87 


Average vertical velocity 


(52) divided by (11) 




88 


Average velocity in pen path 


(54) divided by (11) 




89 


Weighted £r normallised path 


As (64), (65) or (66) 


15 




length to events of each type 


divided by (54) 




90 


Weighted & normallised timing 


As (64), (65) or (66) 






to events of each type 


divided by (1 1) 




91 


Horizontal Symmetry Index 


Zx n — x Q for all as (2) 

nos 


20 


92 


Vertical Symmetry Index 


z Yn-y 0 foral! as (2) 

nos 




93 


Spatial Complexity Factor 


(54) divided by (22)+(19) 



15 



20 



It has been found convenient to assemble a system to perform both the Signature Verification 
task and also to provide the capability of recognising alphanumerics written by hand on the same 
25 transducer pad. A typical and preferred arrangement of such a dual-function system may be assembled 25 
in modular form as illustrated in Figure 7. 

The transducer pad and its associated Analogue/Digital converters (71) supply Input coordinates 
to the Controller (72) which may take the form of a second microprocessor. 

The controller may have access over a data link (70) to a host system (73) which may be located 
30 remotely, or adjacent to the operating position. This host processor (73) has access to appropriate 30 
random access backing stores such as magnetic discs (74, 75) on which are recorded the 
predetermined recognition parameters for a large population of registered signatures (data base (39) of 
Figure 2) and also a repertoire of appropriate responses to be displayed when required on the Visual 
Display module (76) fitted in the same housing as the transducer pad. 

35 The controller (72) arranges for the sequence of coordinate values (the first order primitives of 35 

Table 1 ) to be entered into a circulating buffer (77) in order to spread the work load between points of 
high analytical activity and adjacent points where this activity is less concentrated. 

The module concerned with Signature Verification (78) and that concerned with Character 
Recognition (79) can each draw their incoming data stream from the circulating buffer (77) after a 

40 short delay. 40 

In most applications where both signature verification and character recognition are required, it is 
normal practice for a designated area on the document concerned to be used for the application of the 
signature. It can readily be arranged that when contact is sensed in the Signature area of the 
document, a signal from the controller, by-passing the buffer (77) will select the data path to the 
45 Signature Verification module (78) and when contact is sensed in the areas of the document allocated 45 
for alphanumeric information, the controller will select the data path to the Character Recognition 
module (79), 

When operating in the Character Recognition mode, the Character recognition module (79) 
compares the pattern of coordinates received from the buffer (77) with those stored in its own 
50 Character Description Dictionary (80) and on recognising the pattern received returns appropriately 50 
coded digital signals in for example, ASCII code to the local visual display module (76) and also if 
required, under the control of controller (72) over the communications channel (82) to the host system 
(73). 

When operating in the Signature Verification mode, the controller (72) sends the coordinate data 
55 stream from the buffer (77) to Signature Verification module (78) together with the stored parameters 55 
appertaining to the claimed identity of the individual providing the signature, which may have been 
received from the host system (73) over the communication link (82), or for signatures used frequently 
at this position, the parameters may be stored locally as indicated in Figures 2 and 5. 

The signature verification module (78) performs the verification procedures already described and 
60 returns to the controller a coded signal indicating whether or not the signature presented for 60 
verification can be considered valid. 

Since this module has the additional capacity to update the stored parameters of the signature, 
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provision is made for signalling a revised set of parameters back to the controller (72) and through it to 
the host system (73). 

It may be arranged, if required by the system user, for any alphanumeric data provided by the 
character recognition module to be retained by the local controller (72) and only transmitted to the 
5 host system (73) on verification of the signature authorising its transmission. Likewise, the decision 5 
whether or not to update the parameters held in the main system data base (74) may be made either at 
the local controller (72) or at the host system (73). 

Instead of the main data base storing signature verification parameters being attached to the host 
system (73) a distributed memory may be used, each local terminal having its own data base (39) as in 
1 0 Figures 2 & 5. This distributed concept may be carried even further to the extent that the parameters 1 0 
relating to a given signature may be coded and recorded on an actual document carried by the owner 
of the signature, such as for example a credit card, authority card cash card, bank pass book, identity 
card or passport 

This coding might be provided in Read Only form when the document was first issued, end 
1 5 perhaps changed annually, as with present day credit cards, when a new card is issued, or it might be 1 5 
recorded in a form amenable to updating, as for example using the magnetic stripe provided on most 
varieties of present day credit cards. 

In Figure 7, the signals which have been described above are passed along the signal paths 
represented by solid lines. Broken lines are used to indicate the paths for control signals passed 
20 between the controller (72) and its peripheral modules. A control line between the communications 20 
interface (81 ) and the controller (72) handles messages to indicate whether an associated date stream 
relates to reference parameters, a message for display, or a system command. 

Claims 

1 . Apparatus for verifying the signature of an individual wishing to gain access to a facility 

25 comprising: 25 
i) a transducer responsive to the pressure of a ballpoint pen or similar instrument, when the 
individual writes on a sheet of paper that overlies the transducer, which transducer generates digital 
electronic signals in real time representing the position of the tip of the pen in terms of X and Y 
coordinates relative to a predetermined origin of coordinates; 

30 ii) means arranged to sample at a rapid rate the X and Y coordinates and therefrom to determine 30 

the changes from one sample of each coordinate to the next; 

iii) digital electronic processor means arranged to compute from these changes the X and Y 
components of velocity and of acceleration and their resultant vectors; and further to identify 
significant features of the signature which may be represented by mathematical parameters. 

35 iv) memory means in which is stored (a) algorithms for identifying significant features of the 35 

signature including upper and lower turning points of loops, points at which the pen is applied to or 
lifted from the paper, and lengths of segments of the signature measured as X or Y components, or as 
resultant vectors of the path followed by the pen and (b) mean values and standard deviations or other 
Indications of their spread for numerical parameters representing a selection of the features obtained 

40 by analysis of several specimen signatures from one individual among a large number entitled, on 40 
verification of their signatures to have access to the facility; and 

v) decision means arranged to compare the parameters obatined from a working signature with 
the mean values and indications of spread for the corresponding parameters of the sample signatures 
of the same individual recalled from memory, wherein the limitations in the calculation of a realistic 

45 spread, or Standard Deviation, from a small sample of specimen signatures from one individual are 45 
overcome by the process of combining in the form of a weighted mean, the spread or Standard 
Deviation of a given feature for the particular individual with the spread or Standard Deviation for the 
corresponding feature as determined for a substantial sample of individuals, 

2. Apparatus for verifying the signature of an individual wishing to gain access to a facility 

50 comprising: 50 
i) a transducer responsive to the pressure of a ballpoint pen or similar instrument, when the 
individual writes on a sheet of paper that overlies the transducer, which transducer generates digital 
electronic signals in real time representing the position of the tip of the pen in terms of X and Y 
coordinates relative to a predetermined origin of coordinates; 

55 ii) means arranged to sample at a rapid rate the X and Y coordinates and therefrom to determine 55 

the changes from one sample of each coordinate to the next; 

iii) digital electronic processor means arranged to compute from these changes the X and Y 
components of velocity and of acceleration and their resultant vectors; and further to identify 
significant features of the signature which may be represented by mathematical parameters. 

50 iv) memory means in which is stored (a) algorithms for identifying significant features of the 60 

signature including upper and lower turning points of loops, points at which the pen is applied to or 
lifted from the paper, and lengths of segments of the signature measured as X or Y components, or as 
resultant vectors of the path follow by the pen and (b) mean values and standard deviations or other 
indications of their spread for numerical parameters representing a selection of the features obtained 
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by analysis of several specimen signatures from one individual among a large number entitled, on 
verification of their signatures to have access to the facility; and 

v) decision means arranged to compare the parameters obtained from a working signature with 
the mean values and indications of spread for the corresponding parameters of the sample signatures 
5 of the same individual recalled from memory, wherein numerical scores are attributed to the 5 
differences between the parameter values for the working signature and the corresponding stored 
mean values of the corresponding parameters for the individual concerned, and a non-linear weighting 
is applied to these differences such that if a parameter of the working signature lies within one 
deviation limit it is accorded zero discriminatory significance, if it lies between the first limit and a 
1 0 second limit, the score is forwarded unchanged to a subsequent decision stage, whereas if the second 1 0 
limit is exceeded, the parameter is given a weighting so high as to prevent subsequent acceptance of 
the working signature, the deviation limits applied for each parameter being dependent on the spread, 
or Standard Deviation stored in memory for that parameter. 

3. Apparatus as claimed in Claim 2 wherein scores forwarded from the variable weighting stage 

1 5 are added together In a digital circuit to produce an aggregate score representing a concensus from all 1 5 
the significant parameters, and this aggregate score is compared with a threshold value in a 
comparator module to decide whether or not the working signature being verified should be accepted 
as valid. 

4. Apparatus as claimed in Claim 3, wherein the threshold with which the aggregate score is 

20 compared may itself be changed, a) as the result of an automatic input signal representing the known 20 
overall mathematical variability attributed to the signature of the individual concerned, where 
variability may be defined as 



r* k - SD ij + < 1 " k > SD P j or as \ SD ij 

i 1 ^ u ^ 



and/or b) at the discretion of the operator of the apparatus in accordance with the value of the cash 
25 being withdrawn from an account or the value of the merchandise being bought, and/or c) a further 25 
adjustment as appropriate depending on the esteem in which the customer may be held by the 
management of the bank or other business organisation using the apparatus. 

5. Apparatus as claimed in any preceding claim wherein, as specimen signatures are collected, if 
comparison of the parameters of the last specimen analysed shows it to be widely different from those 

30 already collected from the same individual the inconsistent specimen is automatically rejected and a 30 
new one requested until sufficient reasonably consistent specimens have been provided to enable a 
realistic spread or Standard Deviation to be computed for a sufficient number of significant parameters 
of that signature. 

6. Apparatus as claimed in any preceding claim, having means by which to communicate over a 

35 telephone line or other communication channel with a host processor or head office data base whence 35 
the recognition parameters for an individual may be transmitted to the location at which a signature Is 
to be verified by means of the aforesaid apparatus. 

7. Apparatus as claimed in any preceding claim, having means available to read data encoded on 
an Authority Card (Credit Card, Passport, Bank pass book, I.D. Card or the like) normally carried by the 

40 individual, such data representing the necessary digital manifestation of the parameters derived from 40 
the specimen signatures of the individual, so avoiding the necessity of storing these parameters at all 
the local terminals where it is required that the individual's working signature may be verified, or of 
maintaining immediate access by telephone or other telecommunication means from such terminals to 
a central data base. 

45 8. Apparatus as claimed in any preceding claim wherein the Signature verification capability is 45 

combined in a single module with a capability of recognising, displaying and transmitting a digital 
representation of hand printed alphanumeric characters in any character set, as might be used for 
example on a sales receipt, an airline seat reservation ticket, a cash withdrawal slip or the like. 

9. Apparatus as claimed in any preceding claim in which the necessary computational power 

50 resides in one or more integrated circuit microprocessor chips, and the necessary instructions to enable 50 
the required calculations to be performed are stored in integrated circuit Programmable Read-only 
Memory modules, while the variable data appertaining to the individual signature being verified is 
loaded into volatile memory for the duration of the particular transaction. 

10. Apparatus for verifying the signature of an individual wishing to gain access to a facility 

55 substantially as hereinbefore described with reference to and as illustrated in the accompanying 55 
drawings. 
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